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In this Issue 

Like other mstruments. signal generators are getting more and more built-in 
fnteffigence One result is that some are beginning to offer more than the 
usual sine, square, triangle, and pulse waveforms. Arbitrary waveform 
generators that will reproduce whatever waveform you program into them 
are now commercially available. This means that testing can be more realistic, 
using signals that simulate all of the condrtions a device is likely to encounter 
in normal operation. The HP SITSA Digital Signal Generator offers arbitrary 
waveform generation as an optional capability of a digital data generator. 
Depending on how you configure it. it can produce 24-channel parallel data 
patterns or two-channel serial data for testing digital hardware, two arbitrary analog waveforms 
for testing analog circuits, or a combination of digital and analog waveforms for testing such things 
as analog 'to-digital and digital-to-analog converters. Its outputs can be independent or syn- 
chronized. In the articles on pages 4 and 12, the h\P 8175As designers tell us how it works. 
Noteworthy is their program-controlled looping scheme that makes a lK-bJt memory look much 
deeper They use variable timing to conserve data memory, and they've been careful to make 
the arbitrary waveform generator easy to program — you can enter a series of levels or a mathe- 
matical formula, or point with a cursor on the display, 

HP s Semiconductor Productivity Network (SPN) was an early approach to computer-integrated 
manufacturing for the semiconductor manufacturing industry. SPN consists of several software 
modules, each controlling or monitoring a particular aspect of the semiconductor manufacturing 
process. Recently, HP decided to withdraw from this business, to support only the current SPN 
userSt and not to work on further enhancements. However, one development effort was allowed 
to proceed, so that current SPN users could have a complete system. The final SPN module, 
PL-10, Is a master planning tool. In the article on page 21 , PL-1 0's designers describe its operation 
and explain why semiconductor manufacturing needs a special planning system. 

Small printed circuit boards are often manufactured several at a time on large boards called 
subpanels. At a certain point in the manufacturing process, a router path is cut around each 
board, leaving only small tabs holding the subpanel together. This, of course, reduces the rigidity 
of the panel. To see whether a partially routed panel would deflect enough during subsequent 
handling to affect the components and solder joints on it, HP Laboratories researchers used finite 
element analysis (cover photo). They report their results on page 29, Their conclusion? The panel 
deflection will not exceed the maximum allowable, so costly modifications of the manufacturrng 
process are not needed. 

Conventional reliability theory often describes hardware reliability in terms of a failure rate — the 
percentage of the units in service that can be expected to fail in a given period of time. For 
hardware, the rate is usually higher for very new or very old equipment, and lower in between. 
Application of the failure rate concept to software is in its early stages. In the report on page 35, 
two HP engineers tell how they have modified an existing software failure rate theory to include 
the testing process, so that the failure rale observed at the end of testing can be used to predict 
the in-service failure rate after release of the product. 

-R. P. Dolan 

What's Ahead 

The development of ME Series 5/10, a mechanical engineering CAD product for HP's Design 
Center workstations, is the primary subject of the May issue. In addition, a short report discusses 
the potential use of ac power lines for data communications in buildings. 
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Digital Signal Generator Combines Digital 
and Analog Worlds 

This new generator provides 24 parallel or two serial data 
ctiannels, two arbitrary waveform analog otiannels, or a 
combination of digital and analog outputs. 

by Uwe Neumann, Michael Vogi, Friedhelm Brilhaus, and Frank Husfald 



THE HP 81 75 A DIGITAL SIGNAL GENERATOR. Fig. 
1, is capable of providing up to three different types 
of output stimuli depending on the selected config- 
uration. It can be configured by simple keystroke as either 
a 24-channel parallel data generator, a two-channel serial 
data generator, or a two-channel arbitrarily programmable 
waveform generator, A comhi nation of two types of output 
stimuli is also possible. For instance, a digital data se- 
quence can be generated while the analog equivalent or a 
different analog function is generated by the analog part 
of the machine. 

A large number of different applications can be sup- 
ported by this type of stimulus capability. The HP 81 75 A 
can generate digital patterns for at-speed functional testing, 
simulation, and slimulalion of digilal hardware, and analog 
functions for medical applications (e.g.. electrocardio- 
graphic and plethysmographic signals) and mechanical ap- 
plications (e.g.i ignition-point measurements in the au- 



tomobile industry). Simultaneous generation of arbitrary 
waveforms and digital patterns bridges the gap between 
the analog and digital worlds* and is very useful for testing 
digitaJ-to-analog and analog-to-digital converters, because 
the analog and the digital signals are available at different 
outputs of the same source. Add a comparator, and a go/no- 
go te.st can be performed. Testing of mixed ICs or circuits 
that include both analog and digital components is veTy 
easy, since it is possible to generate independent synchro- 
nous analog and digital data streams. For example, to test 
a programmable filter, ihe data patterns can control the 
filter's Q factor and center or corner frequency, while the 
analog output stimulates the IC. 

Fig. 2 shows the HP 81 75 A system. Fig. 3 is a block 
diagram of the HP 81 75 A. 

Parallel Data Generator 

Data patterns can be generated on 24 channels, each IK 




Fig, t . The HP 81 75 A Digitaf Sig- 
nal Generator can be used as a 

24'Channei. 50-MbiP's paralief 
data generator, a two-channet 
100-Mbit/s serial data genecBtor, 
a two-channel arbltrahty program- 
mable waveform generator (dis- 
play shown), or a combination 
data and waveform generator. 
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bits deep, at 50 Mbit&'s. Two machines can work togelher 
in a master/slave configuration to generate up to 48 chan- 
nels. To overcome the depth Jiinitation, two enhancements 
help the customer minimize the number of memor>" loca- 
tions used. One is virtual memory expansion — a pattern 
sequence that is to be used repeatedly needs lo be stored 
only once in the machine and can then be included in the 
output data stream as often as required. The other is pro* 
gram ra able pattern duration— each pattern consists of data 
and duration parajneters^ so sequences of fast bursts and 
long steady-state signals can be generated by using only a 
few memory- locations. 

Interaction with the device under test is facilitated by a 
trigger input, which can indicate start, stop, continue cycU 
ing, enable or disable outputs, or branch to other data cy- 
cles. Branching can be implemented, for example, when a 
DUT requires initialization routines. The trigger pins can 
be assigned to monitor logic states at various points of the 
DUT, 

A fine-timing option provides a programmable delay on 
four channels. The delay can range from 20 ns to 40 ns 
with inO-ps resolution. 

The HP 8 175 A Digital Signal Generator and an HP 163x 
Logic Analyzer form a versatile stimulus -re spouse system 
for efficient digital testing. 

Serial Data Generator 

Internal serializing of eight parallel channels generates 
a data stream with SK-bit depth and a hit rate of 100 Mhits/s 
on two channels, and a clock signal The switch from paral- 
lel mode to serial configuration is done by a single key- 
stroke. The same interaction features are available as for 
the parallel data generator. 



Arbitrary Wavetorm Generator 

If Option 002 is installed, the digital signal generator 
acts as an analog stimulus. The HP 81 75 A delivers an 
analog waveform on two fully synchjonized channels with 
lO'bil amplitude resolution and up to 1024 data points. 
Virtual memor\' expansion and programmabie pattern du- 
ra I ion are also available to save internal memor\' locations , 
and the same DLTT interaction capability is available as for 
the parallel data generator. The two channels can also be 
operated independently. 

The maximum sample update rate of 50 MHz, the large 
amplitude range of up to 1 6V into 50 Q. and the minimum 
resolution of 0.2 mV meet the needs of a wide range of 
applications in eiectricaU medical, and mechanical envi- 
ronments. Other useful features include dc offset, settling 
times less than 20 ns, and synchronized parallel data chan- 
nels if only one analog channel is used. 

Different methods of entering the arbitrary waveform to 
be generated are possible. Waveforms can be generated by 
ent!3^ of a series of levels, by entry of a mathematical for- 
mula, or hy pointing with the cursor on the CRT screen. 
More information on entering waveforms is given in the 
article on page 12. 

Pods and Accessories 

One trigger pod and tbree output pods are available to 
serve all interconnections to the device under test. The 
function of the HP 13461 A ECL Pod, the HP 15462 A TTV 
CMOS Pod, or the fixed-level HP 15464 A TTL Pod is to 
translate the internal signals of the HP 8175A into signals 
used by standard IC families like lOK, lOKH. or lOOKECL, 
54/74 TVU or 4000 CMOS. Each pod provides 8 of the 24 
channels of the HP 8175A, The eight outputs of a pod can 




Fig. 2, The HP B175A system in- 
ciudBS a trigger pod, three kirrds 
0/ data or flag pods (ECL TTU 
CMOS, TTL), cab/es, corrnectors, 
and various probe accessor/as. 
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be disabled, which for the TTL and TTL/CMOS pods means 
the outputs have a high impedance (tri-state outputs) and 
for the ECL pod means that the outputs are low to allow 
wired-OR connections in the device under test. In the TTL/ 
CMOS pod the high level can be programmed by the HP 
8175A from 2.4V to 9,9V. This provides flexibility for 
CMOS ICs, which operate at nominal supply voltages from 
2V in low-power circuits up to TOY. An additional feature 
of the TTL/CMGS pod 1$ direct control of the high level 
by the device under test. This requires that the external 
high-level control input of the pod be connected to the 
desired high-level voltage (Fig. 4), 

The outputs of a pod are connected by coaxial cables to 
connectors of the type used on the HP 81 82 A Data 
Analyzer*^ For this connector fam.il y a large number of 
accessories like plug-ins. crimps, and BNC or SMB plugs 
are available. The HP 81 75 A transmits its internal ECL 
signals via twisted-pair cables in the differential mode to 
the pods. Here, ECL differential line receivers amplify the 
signal either to ECL levels for the ECL and TTL/CMOS pods 
or to TTL levels for the fixed-level TTL pod. In the TTL 
pod, special TTL line drivers amplify the signal before it 
is connected 1o the outputs. In the TTUCMOS pod, discrete 
output amplifiers are used to get the desired pulse perfor- 
mance at the outputs. All pod inputs and outputs are pro- 
tected against electrostatic discharge (ESD), reverse voltage, 
and short circuits. 

One of the design objectives was to have the pod housing 
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Fig. 3. HP 81 75 A btock diagram. 



as small as possible, because the space near the device 
under test is normally limited. Therefore, two techniques 
are used to miniaturize the pods. The EC]., and TTL/CMOS 
pods are fabricated using ceramic thick-film technology. 
The fixed -level TTL pod. a low-cost version, is produced 
using surface mounted device technology [Fig. 5), 

User Interface 

A major aspect of this project v^ras the firmware develop- 
ment. A requirement was that the user interface be similar 
to that of the HP 163x logic analyzer family so that a cus- 
tomer who needs a stimulus/response system will find it 
easy to understand both machines. 

A cur.sor-d riven menu interface was selected. Any one 
of six major pages (System, Control, Timing, Output, Data, 
Program) can be selected by a single keystroke. The content 
of the main pages and their subpages depends on the chosen 
generator configuration, selected on the System page. The 
possibility of choosing different configurations depends on 
the hardware configuration. 

The storage capability is also accessible via the System 
page. The nonvolatile memory can save two complete 
machine settings plus ttie current setup. Lip to 255 different 
setups can be supported without an additional controller 
if an external disc drive is connected to the HP S175A. 
Hard -copy output of data or screen settings to an external 
printer is also possible. 

Implementation 

As shown in Fig. 3, the HP 81 75 A Data Generator consists 
of a power supply, the microprocessor board, the clock 
board, which processes the input trigger signals and creates 
the clock signals lor the whole machine* and the data board. 
The data board stores the patterns and generates the parallel 
data Signals depending on the stored patterns, the pattern 
duration, and the programmed data stream, A buffer board 
drives the external pods, and if the fine timing option is 
installed, contains the delay lines for four channeis. Also 
optional is the dual-channel arbitrary board, which pro* 
vi des the arbitrary analog waveform generat ion capabii !ty , 

Interconnection between boards is the function of a 
motherboard, which provides the supply voltages, a TTL 
control bus for data interchange between the micropro' 
cess or and the other boards, and an ECL high-speed bus, 
which carries data and clock signals between the data board 
and the clock, buffer, and arbitrary boards. For easy servic- 
ing, a connector that can accept any board is provided on 
top of the motherboard. The internal self -test is capable of 
detecting almost any fault on any board and displaying an 
appropriate error code on the display. This helps minimize 
troubleshooting time and keep service costs low. 

Data Board 

The data board (Fig. 6] stores the information for the 24 
channels and generates the timing of the data stream for 
the 24 channels^ Behind each data channel is a high-speed 
ECL memory that has iK-bit depth and a data access time 
of 10 ns. The timing generated by the data board is depen- 
dent on the clock frequency. With the internal lOO-fvfHz 
clock, the shortest time interval is 20 ns and the longest is 
9.99 s. The shortest increment is 10 ns. With an external 
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clock, the shortest mterval is one clock period and the 

longest IS 1,000.000 clock periods. The external clock input 
accepts clock frequencies from dc up to 100 MHz. For 
efficient use of the data memories, t^%*o special techniques 
are used to generate the data stream: 

■ Program-controlled looping of information 

■ Generation of variable timing. 

In a data stream, certain patterns » synchronization infor- 
mat ion for example* are frequently repeated. The HP 81 75A 
allows the user to create 256 information modules, each 
specifying a data pattern. The sequence in which ^hese 
modules are used is controlled hy the program. 

Three different programs are available. The one to be 
used is selected by an external trigger event called the 
START, JUMP A, JUMP B vecton The START. JUMP A. JUMP B 
vector points to one of three entrance points of different 
pro-ams (see Fig. 7). Another event called the CONT vector 
causes a program to be repeated continuously in the auto- 
cycie mode. 

A vector, the START vector for example, represents an 
entrance point PO and an endpoint Pn of a program. PO 
through Pn are program sequences, and there can be up to 
256 such sequences in the HP 81 75 A (n^255). Each pro- 
gram sequence refers to an entrance point DO and an end- 
point Dm in the data memory, which is 1024 bits deep 
(m^ 1023 J, 

By this technique of program -controlled looping, the IK 
bits of physical memory depth is increased to a much larger 
virtual memor>- depth. 

Operation of the data board Is as follows (see Fig. 6). The 
vector memory is addressed by the START, JUMP A, JUMP B 
or CONT vector received from the clock board. The program 
memory address counter reads the start and stop informa- 



tion of the program out of the vector memor\' and addresses 
the program memory, which contams the start and stop 
information for the data and timing memories. This Infor- 
mation is loaded into the data memory address counter* 
which addresses the data and timing memories in paralleL 
From the timing memon\ the pattern duration Is loaded 
into the timing generator. At the end of each pattern, the 
timing generator increments the data memory address 
counter- The LATCH signal from the timing generator \\Tites 
the pattern information from the data memor^^ via the fine 
timing/huffer board to the outside world with precise tim- 
ing. The increment signal of the data memor>' address 
counter fetches new data and timing information out of 
the data and timing memories. When the endpoint in the 
data memory address counter is reached, a new program 
sequence will be addressed, because the last data memor\^ 
address counter increment also increments the program 
memory address counter. In single-cj^cle mode, the data 
stream stops when the last pattern of the last program se- 
quence is completed. In autocycle mode the CONT vector 
will occur and start the program again* 

Variabla Timing 

Because a normal data stream will rarely he a square 
wave, fixed timing of a data steam is inefficient. For exam- 
ple, a traditional data generator needs 18 memory locations 
for the data stream illustrated in Fig. 8. The HP 81 75 A, 
which has variable timing, needs only 8 memory locations 
for the same data stream. Fig. 9 is a diagram of the divider/ 
timing generator that implements variable timing. The HP 
8175 A system clock is connected to the divider-counter 
blocks A and N. The divide-by- A counter has four constant 
division ratios: 1» 100, 10,000. and 1,000,000. These result 
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in dock periods of 10 ns, 1 /if5, 100 /is. and 10 ms, respec- 
tively, if the internal 100-MH;£ clock is used. Thedivide-by- 
N counter multiplies one of the basic periods by N. which 
is programmed by the timing RAMh The smallest value of 
N is 2 and the largest is 1023, The multiplexer, also con- 
trolled by the timing RAM, decides which basic period 
(value of A] is in use. This technique allow^s the user to 
program a 20-ns interval followed by a 9.99-s interval with 
the same memory consumption for both. 

Clock Board 

The internal system clock is a lOO-MHz oscillator that 
has synchronous start/stop functions and an asynchronous 
function: the oscillator can be controlled by a phase- locked 
loop. Normally, if an oscillator is controlled by a phase- 
locked loop, it runs continously, and a start/stop signal can 
only gate its output. In a data generator like the HP 8175A. 
this could result in a timing deviation of up to one clock 
period [10 ns) in the output data patterns. In some applica- 
tions w^hen the generator must react to conditions in a DUT 
this might be a problem, so a synchronous start/stop oscil- 
lator that can be started and stopped in reai time is required. 
In the HP S175A the system clock can be switched between 
phase-locked operation and synchronous start-stop opera- 
tion either from the front panel or via the HP- IB. 

To ensure a high-performance start/stop oscillator we 
decided on a delay-line oscillator with a defined delay line 
and lOOK ECL gates. The frequency of this oscillator type 
depends on the length of the delay line [nearly 4 ns fixed] 
and the propagation delay of the lOOK ECL gate. This delay 
is 0,5 ns to 1,3 ns, which means that different gates can 
result in frequencies between 92.5 NfHz and 108.5 MHz. 
Investigations proved that this was the case, so we included 



Fig. 5. ThB TIL pod (left) uses 

surface mount technology. The 
TTUCMOS pod (fight) and the 
ECL pod use ceramic thick-film 
technology. 



an adjustment circuit to provide an adjustment of - 9 MHz 
to +11 MHz* This adjustment is done by a variable resistor 
at the input of the gate, as shown in Fig. 10, 

Addition of the resistor influenced the lime constant of 
the feedback signal at the gate input. Now the problem was 
that the nscillator could oscillate at its third harmonic [300 
MHz in this case). To avoid this problem we decided on a 
flip-flop circuit that shuts itself off for 4 ns. The timing 
diagram and circuit in Fig. 11 show how it works. The 
original lOOK ECL gate is shown as gate 1 in Fig. 11. Low 
signals at lime tO at inputs 3 and 4 of gate 2, vk^hich depend 
on the output of gate I , set the output of gate 2 to high. 
This output is connected to input 2 of gate 1 and closes 
this gale for a wrong oscillator edge, which can occur at 
time tl at input 1 of gate 1. 



Ctock 




Fig, 6, Data board block diagram. 
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Fig. 7, f/ie START. JUMP A, JUMP B vector selects one ot three 
programs. Each program can have up to 256 sequences, 
each of which occupies a sectton of the data memory, which 
is W24 bits deep. This errar}gemenl gtves a virtual rrjemory 
depth much greater than 1024 bits. 

The next step was to develop a phase-locked loop circuit, 
A standard phase-locked loop is used (Fig. 12), which 
supplies a voltage proportional to the phase error between 
the internal quartz reference (an external reference can also 
be used) and the divided clock signal This voltage is fed 
to a varicap diode circuit (see Fig. 13] which influences 
the slew rate of the falling edge by varying the capacitive 
load of the gate output. It provides a controllable frequency 
range of ±2.4 MHz. 

The diode circuit can also be switched to the output of 
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Fig, 8. A traditional data generator needs 18 memory loca- 
tions tor the data stfeam illustrated. The HP &175A has vari- 
able timing and needs only eight. 
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Fig. 9. Vanatie timing is implewenled by this divider/^ming 
generator. 

a digltal-to-analog converter. This provides the capability 
of recalibrating the oscillator in the synchronous function 
mode, when the phase-locked loop isn*t locked. 

Arbitrary Waveform Generator 

The main function of the arbitrary board is the generation 
of two independent analog signals — the arbitrary w^a ve- 
to rrns. These are derived from the data and timing values 
entered by the user. The values are stored on the data board. 
Under control of tlie microprocessor, Uie arbitrary board 
generates the output signals for channels A aud B and the 
two corresponding trigger outputs. 

The arbitrary board consists of six functional areas, as 
shown in Fig. 14: 

■ Device bus interface. This is the interface to the micro* 
process or- prod need control signals* 

■ Vernier control circuitry. This produces the amplitude 
range and offset control vokages. 

■ Trigger circuitry. This produces ECL or TTL trigger sig- 
nals as required. 

■ Output A. This provides digital-to-analog conversion 
and povirer amplificalion. It buffers the channel A data 
from the data board and feeds it to the fast DAG and the 




Fig, 1 0. Delay-line oscillator has an adjustment for gate delay 
variations. 
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power amplifier and attenuators for the channel A output. 

■ Output B. This pro%^ides the same functions as output 
A. but for the channel B output. 

■ Calibration circuitry. This performs an autocalibration 
of the amplitude and offset DACs each time the HP 8 1 75A 
is powered up. 

Fig. 15 is a more detailed block diagram of the arbitrary 
waveform generation circuitry. The binary data streams 
from the data board, ten bits w^ide for each channel, go 
through differential line receivers, which act as buffers, 
and a set of ECL latches to the multiplying ECL DAC» a 
Plessey SP9770B. The multiplying input of the DAC Is used 
for coarse and fine control of the output amplitude. The 
amplitude factors are xl, xO,8, x0,5, and x 0.4, These 
factors can be fine-tuned ±3.2%. ±4%, ±6.4%. and ±8%, 
respectively, for calibration purposes. 



Reference 

Crystal 
Oscillator 




2.5 ns 

Fig. 13. A varicap diode arcutt provides a controHable fre- 
quency range of ±2 A f\JlHz at WO MHz. 

The complementary outputs of the multiplying DAC can 
be interchanged by a relay to perform the norma I /com pie- 
men! function, and are fed to a summing amplifier stage 
to obtain a single-ended signal. This signal passes through 
a switchable 1/5 attenuator to the power amplifier. The 
amplifier delivers up to ±8V into a 50O load or ±16V into 
an open circuit. Its design is derived from the HP 811 6 A 
and HP 8111A power amplifier designs.^ A switchable 20- 
dB attenuator follows the power amplifier. 

The amplitude range and offset controls are generated 
in four independent 13-bit AD7548 DACs. The amplitude 
range controls Influence the multiplying inputs of the high- 
speed ECL DACs, The offset control DACs generate the 
voltages for the offset voltage inputs of the output power 
amplifiers. 

All control signals for the normal/complement switches 
and the various attenuator relays are delivered from the 
device bus interface. Data for the amplitude range and offset 
control DACs also comes from the microprocessor via this 
interface. The DACs' control function requires two eight-bit 
addresses for each DAC, 

Tw^o of the 24 data channels of the data board can be 
programmed for trigger purposes. These two channels 
bypass the bus buffers on the arbitrary board and go instead 
through differentia! power amplifiers capable of delivering 
BCL and TTL levels into a 500 load. The trigger circuitry 

(conoftued on page 1 2) 
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{corUinued from page tO) 

is con trolled by the microprocessor through the device bus 
interface. 

Tlie calibration circuitry consists essentially of an elec- 
trically erasable programmable read-only memory fEE- 
PROM]. During the adjustment process, which takes place 
only in production or field stjrvice, correction values for 
each amplitude range and voltage range are measured for 
500 and open-circuit loads- These values are stored in the 
EEPRQM. They are read under ccmtrol of the micropro- 
cessor each time the board is powered up. 
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User Interface and Software Architecture 
for a Data and Arbitrary Waveform 
Generator 

by Ulrich Hakenjos, Wolfgang Srok, and Rudiger Kreiser 



A COMPLEX, VERSATILE. ANLf POWERFUL instru- 
ment like the HP 61 75 A Data Generator requires a 
human interface that is easy to learn and comfort- 
able to use. The HP 81 75 A human interface is based on a 
Giu'sor-driven menu concept similar to that of the HP 1630 
Logic Analyzer, 

A 9~inch CRT provides the user with all necessary infor- 
mation like status, parameters, etc. All inslrument settings 
(data, operation conditions, etc.) are distributed over six 
main display pages, or menus (Fig. 1). Each main page 
allows the user to make particular types of settings. To 
enter or change a parameter, the cursor must be moved 
into the highlighted field, where the current value is dis- 
played. Then the value or condition can be changed via 
the keyboard* 

A special feature of the HP 8 175 A is that the user can 
preset changes of settings or conditions, such as data pat- 
terns or cycling conditions, while the HP 81 75 A is running. 
The new conditions can then be transferred to the outputs 
at some convenient time. A powerful new capability is tlie 
creation of timing diagrams (data generator) and waveforms 
(optional arbilxary waveform generator) by means of a 
graphic editor that includes several interpolation capabil- 
ities, a pattern editor, or a calculator mode. 

Software Architecture 

The system architecture can be described as a layered 
model consisting of four layers, the first three softw^are and 
the last hardware [Fig. 2). The top layer contains the human 



interface, which is the bridge between the outside world 
and the instrument and contams the various menus and 
the HP'IB interface. The next layer Is a real-time multitask- 
ing operating system, which performs the internal system 
control. The lowest software layer contains the drivers for 
the hardware. 

Each data field on the menus is assigned to a correspond- 
ing driver number. If a parameter has changed, the corre- 
sponding driver number will be stored in a FIFO buffer 
called the driver queue. A specific task of the operating 
system (the hardware task) is to read the content of this 
queue periodically. If the queue contains a driver number, 
the hardware lask takes this number and calls the corre- 
sponding driver routine to change the hardware state. 

The lowest layer, the hardware layer, consists of the mi- 
crocomputer, clock, data, fine-tiniing. and arbitrary boards. 

Memory and 1/0 Allocation 

The memory size exceeds the direct addressing capabil- 
ity of the microprocessor, a Motorola 6809. This micropro- 
cessor can address 64K bv'tes. To access the HP 81 75 A 
system memory of 288K bytes> the addressing capabilities 
of the microprocessor are extended by means of a memory 
management unit (MMU). The MMU transforms a virtual 
address into a physical address. The physical rnemory is 
subdivided into 2K-byte segments. To allocate a physical 
segment to a virtual segment, the system needs the virtual 
page number and the physical address of the segment. The 
operating system supplies these numbers and controls the 
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Fig, 1 , The user intefface of the 
HP 81 75A Data Generalor distrib- 
utes all instrument settings over 
six main dispiay pages, or menus. 



operation of the MMU, Fig. 3 sliows a typical memory 
configuration. 

Editmg Data 

The HP 8175A provides comprehensive data editing sup- 
port. Data can be edited in several modes, using either the 
pattern editor or the waveform editor. The arbitrary' 
waveform generator provides two additional modes: a 
waveform calculator^ which allows the creation of a 
waveform using a mathematical expression, and several 
interpolation functions, including linear interpolation and 
natural and periodic spline interpolation. 

The pattern editor allows the entry of data in different 
formats including binary, octal, decimal, hexadecimal, and 
level [arbitrary waveform generator option), and provides 
a set of useful editor functions. An overview of thij func- 
tions of the pattern editor is shovk^ in Fig. 4. 

Graphics 

A significant feature of the HP 8175A is its graphics 
capability. Data set up using the pattern editing capabili- 
ties» the calculator* or the interpolation functions and 
stored in tabular form can be displayed graphically. A 



waveform displayed graphically is obviously far more 
meaningful than several pages of data. 

The HP a 175 A has a bit-mapped graphic capability with 
512 X 256-pixel resolution. There are two graphic displays: 
one for the parallel/serial data generator configuration and 
one for the arbitrary waveform generator [see Figs. 5 and 
6]. For either case, numerical and graphical editing are 
possible. 

On either graphic display, the values in the upper right 
nurnerical part of the display [address, label, duration, etc.] 
relate to the position of the currently active editing cursor. 
A window in which a specific part of a waveform is dis- 
played can be defined (Fig, 6). The window can be scrolled. 
The active cursor remains within the window, so if the 
cursor tries to '^escape" from the window, the window will 
also move. 

By means of the editor, columns (addresses) on the dis- 
play can be inserted or deleted, 

ParalleE/Serial Data Generator Graphics 

The graphic display for the parallel/serial data generator 
is generated by means of a hardware formatter, which con- 
verts the information stored in memory to a form suitable 




Fig. 2. HP 81 75 A system dfchi- 
tecture has four layers, three soft- 
ware and one hardware. 
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Fig. 3. Typicaf HP 81 75 A fntemat memory aitocations. 



for the CRT. 

The required large d>Tiamic range for time intervals, fram 
0.01 /IS to 9.99 s for the hilernal clock and from 1 to 999,999 
cycles pattern for an external clock, led to the following 
implementation for the data generator graphic display. The 
screen is horizon tally divided into ten vertical sectors. 
Time per division (or sector) can be set from 50 iis to 5 s 
in nine steps (Fig- 5j. A small value expands the display, 
creating a small window. A large value compresses the 
display, creating a large window. 

The position and width of the window and the cursor 
position within the window are displayed as bars on the 
lowest pixel row. 

Up to 16 channels can be chosen for simultaneous dis- 
play. 

Arbitrary Waveform Generator Graphics 

For displaying arhitrar>^ waveforms, 1024 addresses with 
ten-bit resolution can be represented on a 512 x 256-pjxeI 
CRT. To ensure that no information is lost when 1024 ad- 
dresses have to be accommodated in 512 pixel columns, 
each pixel column has two memory locations available for 
level infarmation for an address pair. 

The user can define a window' as a subset of the full 
range to increase the resolution (zooming). For this pur- 
pose> in the upper right corner of the display, the full range 
of addresses and amplitudes is displayed. Within this full 
range, the user can define a window^ with width selectable 
from 100% down to 25% in three steps, and height select- 
able from 100% down to 3% in six steps (Fig* 6)* 

Two graphics cursors are available . Fast positioning of 
the active cursor and/or the window is possible by^ 



■ Cursor swap 

■ Label quick search 

■ Scrolling 

■ Directly entering numerical addresses. 

The physical screen can be divided vertically into as 
many as four logical screens [Fig. 7). The fol lowing modes 
are available: 

■ Only one curve 

■ Curve and associated trigger 

■ Two curves 

■ Twoanalogcurvesandtheirassociateddigitaltri gge r s . 
Editing is possible in all of the previously described 

modes. However, the level increment depends on the cho- 
sen display mode. Other capabilities include voltage and 
time measurements between the two graphics cursors, and 
setting and deleting triggers. 

Simulating Waveforms 

In practice, it is not always possible or practical to de- 
scribe a waveform mathematically. Instead, many wave- 
forms need to be simulated (Fig. 8). Examples of such 
waveforms are: 

■ Medicine: heartbeats, ner\^e responses 

■ Material/electromechanical testing: disc drives, switch- 
ing motors, relays 

■ Radar and sonar signals 

■ Waveforms for stimulating electrical/electronic compo- 
nents. 

Waveforms are simulated with the HP 8 175 A by entering 
characteristic points and interpolating between them. 
Characteristic points can be graphically set and deleted in 
either of two ways, and can be interpolated by means of 
linear, normal, or periodic splines within any user-defina- 
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Fig. 4. OverviBw of the functions of the pattern editor. 



ble a id dress range. Characteristic points can be deleted in 
blocks. 

Interpolation 

There are two principal methods of interpolating N 
characteristic points: by polynomials or by splines,^ 

When polynomials are used, N charactensttc points are 
interpolated with a best-fit (N-- l)th-order polynomiaL 



From the N characteristic points, N equations are derived, 
from which the unknown coefficients of the polynomial 
can be detBrniined. 

Since, normally, the matrix of this set of equations has 
no zeros s the Gauss procedure can be used for solution. 
However, the computation time is proportional to the 
square of the number of trnknown coefficients and can be 
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Fig. 5. Graphic display for the 
dats generator configuration. 
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very long. It is also possible to use the Horner formula, for 
which the computation time is linearly proportional to N. 
However, in cases where a large number of characteristic 
points are defined, this function oscillates at the interval 
margins.^ 

Splines 

Because of these disadvantages of polynomial interpola- 
tion, the HP 8175A uses splines. The term spline can be 
traced hack to the early days of shipbuilding, and relates 
to tlie way in which the hull curves were formed. With 
splines, the time required to compute the coefficients of a 
wavefonn is proportional to N, and the time required to 
determine an interpolated value is constant. 

In spline interpolation, between each two consecutive 



Rg. $. Graphic display for the 
arbitrary waveform generator con- 
figuration 



characteristJc points, third -order polynomial interpolation 
is done (Fig, 9). Thus, there are (N-1) sectors, and (N-1] 
third'Order polynomials to be computed. 

To determine the coefficients, four conditions must be 
satisfied. Two conditions are related to the requirement 
that the two characteristic points at the ends of a sector 
have to be elements of the resulting function. The other 
two conditions are related to the requirement that the 
slopes at the tivn margins of a sector must merge smoothly. 
That is, the first and second derivatives at the sector mar- 
gins must be identical. 

Additional conditions apply at the start and end of the 
interval to be interpolated. For example, for a periodic 
spline, the slopes at the start and the end of the interval 
have to be identical/^'* 
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For spline interpolation , the matrix of the set of equations 
is a cyclic tridiagonal matrix. Therefore* a simplified Gauss 
procedure can be used. The computation time is linearly 
proportional to N instead of N^. 

The user can estimate the trend of a natural spline func- 
tion to be computed simply by imagining how a flexible 
ruler would be bent if it were confined within or supported 
by the characteristic points. There is no problem of oscil- 
iaCion at the sector margins. 

The Calculator 

The wdvelorm calculator is a special capability of the 
arbitrary waveform generator option that enables the user 
to write and run programs to set up most complex mathe- 
matjcal waveforms by directly entering the formula in its 
written form- This can be done ujsing only the HP 8175A 
keyboard; no separate computer is needed. 

A comprehensive selection of standard statements and 
mathematical functions is available via softkeys. It is not 
necessary to type every character, so progriims can be writ- 
ten very quickly. 

The process that does the actual calculation and transfers 
the new amplitude and timing values to memory includes 
editing (setting up the function)* setting the parameters* 
and finally, running the module. The following example 
shows how to set up and run a simple sinusoidal waveform. 

Oeriving the Mathematical Function 

As already mentioned, using the calculator involves set- 
ting up the mathematical expression that represents the 
waveform. In practice, the first step is to derive this for the 
waveform. This is done as follows: 

A sinusoidal waveform can be expressed as 

y ^ sin [wt] = sin (2Trft) - sin (27rfTJ 

where T^ is the tnstanlaneous time. Within any amplitude 
range, waveform accuracy depends on the combination of 



maximum and minimum level values and the number of 
data points used. We will use lOOtJ data points for one 
cycle. w4iich means that 1000 steps (level values) must be 
calculated (1024 steps are available but 1000 is an easier 
number to work with)* 

For a frequency of 10 kHz, the period is 100 ^s. The 
timing window (the duration that the waveform will be 
calculated for) must be set to 100 /xs and each incremental 
step of T^ must therefore be 0,1 /as. Calculator functions 
are set up as one or more modules, each of which consists 
of a header and an algorithm part. In this example the 
header defines the required time windoiv of 100 /is and 
the incremental step duration of 0,1 /xs. The algorithm part 
is the expression for the w^aveform. The complete module 
is shown in Fig, 10, where line represents the header and 
line 1 the algorithm. 

Syntax, Restrictions, and Limitations 

The module syntax is similar to normal computer pro- 
gram statements. Fig. 11 shows the syntax diagrams. All 



Example: H 4 characteiistie points 
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Fig. 9. Thffd order polynomtal inter poiation is done between 
charactenstic points. 
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items enclosed by rounded envelopes are available directly 
via a corresponding softkey. Words enclosed by a rectangu- 
lar box are names of items used in the statements. 

The complete function can consist of 750 bytes. Each 
ASCII character, including spaces, requires one byte. 
Keywords such as FOR, STEP, etc. and standard functions 
such as StN, LOG^ etc. also require only one byte each. The 
step duration must be within the HP 8175A's timing (20 
ns to 9-99 s) and resolution (10 ns to 0.01 s] capabilities. 
All calculations are done by means of a floating-point li- 
brary' with an internal 32'bit format. Therefore » the calcu- 
lation time for the sinusoidal waveform is about 7 seconds, 
because most of the standard functions including SIN are 
derived from truncated series, The maximum relative error 
in these approximations is less than 0,00039% for the SIN 
function. 

Setting the Parameters and Running the Module 

After the function has been edited, it is compiled au- 
tomatically by leaving the editor. If a syntax error is dis- 
covered, an appropriate error message will be displayed 
and the location of the error within the function will be 
indicated by the cursor. In such cases, any corrections re- 
quired must be made before it will be possible to end the 
edit mode. If there is more than one error, another error 
message will be displayed after the first error is corrected. 
Only w^hen all errors have been corrected is leaving the 
edit mode possible. 

The next step is to define the relation between the edited 
function and the desired output voltage and arbitrary 
waveform channel. In Fig. 12, the first field defines which 
output channel the function is to be calculated for, and the 
second defines how to consider the levels, either with or 
without offset. 

The amplitude range previously set on the output page. 
5V for example, will be displayed. The required maximum 
and minimum Levels can now be set. These are the 
amplitude values that are assigned to the maximum and 



Fig. 10. To define a waveform 
using the waveform calcufator, 
functsons are set up as one or 
more rrjodufes, each consisting of 
a header (line here) and an al- 
gorithm (line 1), 



minimum data values calculated from the function. 

The Calculate from Address is the address from which the 
calculated data patterns will start. 

The last step is to start the calculating process. The result- 
ing amplitude and timing values are transferred to the HP 
8175A*s memory. 
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Fig. 11. Waveform aafcutator syntax diagrams. 
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Local Overlaying 

Cmfislalk simulation often requires noise, spikes, or other 
functions to be overlaid in a specific part of an existing 
waveform* The HP 81 75 A 's Combine feature makes this pos- 
sible and offers great flexibility, A function can be com- 
bined in a variety of ways with any part of an existiDg 
waveform. This is useful in cases where, for example, a 
waveform that is very difficidt to describe mathematically 
and has therefore been set up graphically or by spline in- 
terpolation needs to have noise added to it, The noise 
waveform can he set up using the calculator and then com- 
bined (add, subtract, multiply, divide) with the original 
waveform. The signals can be combined in any ratio be- 
tween H-60 do and —60 dB. An example illustrating the 
use of this capability is shown in Fig. 13. 



For the sine wai'^e example, the original sine wave mod- 
ule must be deleted and replaced with the noisy function. 
The Combine field of the parameter .setup page must be set 
to On [Fig. 14). The Combine mode and the ratio of the two 
signals can then be set. 

After calculation is completed, the HP 8175A's memory 
will contaiJi the new^ waveform calculated from the old 
pattern and the new function [Fig. 15), 
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Fig, 13. Definition of a random 
nofse waveform to be added to a 
sine function. 
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A Planning Solution for the Semiconductor 
Industry 

Semiconductor device manufacturing has several 
situations that complicate normal production scheduling 
and medium-range planning, PL-10, part of HP's 
Semiconductor Productivity Network, v^as developed to 
deal v\/ith these pecufiarities. 

by Edward L. Wilson^ Kelly A. Sznaider, and Clemen Jue 



PL-10 IS A MASTER PLANNING TOOL developed 
by Hewlett-Packard for the semiconductDr manuiac- 
turing industry. It addresses the task of medium- 
range production planning (up to 2 years) for a geographi- 
caiiy distributed semiconductor division or company. 

PL- 10 helps the plaimer develop master production 
schedules for all major areas of a semiconductor company: 
wafer fab, sort, assembly, and tesL The planner enters basic 
planning parameters — product demand forecastSp time- 
phased WIP (work-in-process) availability, product yields, 
and lead times — either manually or through batch files (see 
Fig. 1). PL- 10 works backward from product demand to 
determine wafer requirements, which the planner can re- 
view and modify. It then projects forward from planned 
wafer starts to expected shipments. The planner can review 
rough-cut capacity use projections and associate compo- 
nent requirements with product demand. Repeated itera- 
tions of this process result in a workable conipanywide 
production plan. 

PL-10 is currently in use in several HP semiconductor 
facilities and is being installed at several customer sites 
inside and outside the U.S. A- The release of the product 
unfortunately comes at a time when HP has decided to 
withdraw from the semiconductor CIM business. Despite 
this decision, development of PL-10 was deemed critical 
enough to continue with release plans, but the product will 
not be sold outside the current SPN user base and no further 
enhancements will he funded. 

Semiconductor Manufacturing Planning 

The semiconductor industry is a complex hybrid of batch 
and process manufacturing. While the basic job of schedul- 
ing production is the same in any industr^^ there are prob- 
lems that make traditional MRP (material requirements 
planning] solutions difficult to implement: 
No work orders. Semiconductor wafers are processed in 
lots which are sized according to the equipment they will 
be processed on. Typically they are not tracked by specific 
work order; rather, they are treated as a continuous flow 
of materiaL This creates problems for MRP systems that 
schedule work orders to meet end -item demand. 
Inverse part structure. Semiconductor devices are grown 
from simple raw materials. Assembly [placing the semicon- 
ductor die into a ceramic or plastic package) occurs late in 



the manufacturing process. A single integrated circuit, or 
die, can be made into a variet^^ of products depending on 
the circuit layout, the type of package used, and the tests 
administered. ROM chips have additional variations when 
a generic ROM wafer is programmed by a customized inter- 
connection pattern defined in a final mask layer. This in- 
verse part structure — simple bills of material with thou- 
sands of end items made from a few basic components — 
does not work well wath traditional MltP. MRP helps plan- 
ners answer the question. "What must 1 order to build the 
products 1 need?" The semiconductor planner must also 
answer the question, "What can I make with the material 
already in-process?*' 

Fluctuating yields. Semiconductor device yields can be 
unpredictable, especially for new processes. Normal MRP 
systems can handle the possibUily of scrap, but may be 
unable to deal with situatioos such as: 



Implement 
Plan 




Fig. 1 . Plannsng cycle. 
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m Wafer-to-die conversion. The number of good parts (die] 
on a wafer can vary widely. The planner must estimate 
the number of wafers needed to make a required number 
of parts. This is different from the standard MRP "Quan- 
tity Per" in which a truck, for example, always needs 
four wheels and cannot be built unless those wheels are 
available. 

■ Yield improvements. While yields fluctuate, they tend 
to improve over time, A planner who does not consider 
this gradual improvement will risk scheduling too many 
wafer starts in later periods, 

■ Binning. Not only does the yield of good material vary, 
but the very output of the process is not completely 
controlled. Finished circuits are subjected to a variety 
of electrical and environmental tests to determine the 
specifications under which they may be sold. The out- 
come of this binning process is subject to statistical dis- 
Jri button but is also influenced by tiie desired outcome 
of the process. Thai is, I he set of tests done on the material 
depends on which grades of product are in demand. 
Material that fails a test may also be retested to a less- 
stringent specification (downgrading). 

Worldwide planning. Nearly all semiconductor manufac- 
turers do assembly in the Far East. Any planning system 
for the semiconductor industry must be able to schedule 
multiple sites at once. This involves allocating production 
between factories that have different delivery times and 
work schedules. To be fully functional, the planning system 
must be able to send and receive data to and from these 
factories without manual rekeying. 

The semiconductor industry has gone through a radical 
shift in the last few years. When business was booming, 
manufacturers could sell everything they made. Accord- 
ingly, the emphasis was on improving yields and process 
throughput. With business currently declining, there is 
an increased emphasis on production planning— 4] uilding 
the right product — ^nd on matching capacity to uncertain 
demand. 

History 

As mentioned earlier, PL-10 is the last of the Semicon- 
ductor Productivity Network [SPN, see Fig. 2) products to 
be developed.^ ^ The precursor to PL-10 was created at 
HP's Corporate Manufacturing Information Systems (CMIS) 
to be a standard scheduling system for internal HP divisions 
that would eventually converge with HP's MM/3000 master 
scheduling package.^ Instead, the software was used as the 
starting point for PL-10, with much of the original code 
and functionality^ carried over. 

The first version of PL-10 was released in early 1985 to 
HP's Northwest IC Division and Loveland Techtiology 
Center, and one outside customer. Based on the feedback 
of these users, a substantial redesign was done. The second 
version was completed in August 1986, and included ma|or 
changes to the data base, the production calendar, and the 
MRP Explode logic. New interface programs and the Roll 
Forward program were also added. 

Integration with SPN 

PL' 10 extracts essential parametric and production data 
from 1C*10» the SPN lot tracking system. The systems are 



loosely coupled by file interfaces. 

Shop floor calendars, process yields, cycle times, part 
numbers, and part information such as cost and probe 
yields are examples of parametric data that can be extracted 
from lC-10. PL-10 obtains VVIP status from a standard lC-10 
exlract file containing a snapshot of production — ending 
on-hand quantities for each process location. Using fC-10 
process yields and cycle times, PL-10 forecasts these out 
to finished goods inventory to determine expected outs 
quantities and their expected due dates. 

PL-10 's Part Mapping function allows the planner to con- 
solidate several production parts, spanning several IC-10 
WIP and stockroom areas, into one planning part. Consoli- 
dation can be done on the basis of similarities in the part 
numbers; this is particularly useful for planning families 
of parts. The goal is to reduce the number of items that the 
planner has to forecast. 

Since IC-10 and PL-10 are loosely coupled, either system 
can be installed first. The interface allows any inventory 
tracking system, such as MM/3000, to feed data into PL-1 0. 
PL-10 can tlius be used to do production planning and 
schediihng for several tracldng systems, either on the same 
computer and/or at remote computer sites. This flexible 
interface approach also applies to FL-lO's customer order 
and forecast interface, which allows any order processing 
system to enter demand into PL-10. Forecasts can be up- 
loaded from spreadsheet programs using the same inter- 
face. 
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Fig. 2. HP'$ Semiconductor Product fvity Network is a collec- 
tion of hardware and software products desigrjed to aid micro- 
eteclromc product fabrication personnel in controlling, 
monitoring, improving, and managing many of ttie levels of 
the complex manufacturing process. 
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PL-10 as a Manufacturing Tool 

Editing the Plan. PL-10 allows tke user to oianlpuiate the 
production piaii on-ilne in real time, unlike most conven- 
tional MRP systems. The planner can perform simulations 
or make last -minute changes lo the plan depending on the 
manufactuiing environment. To plan more effectively, it 
is ver\^ important to be able to assess various tentative plans 
and schedules by varying some or all factors. This %vhat-if 
analysis is one of PL-10 *s capabilities, called Edit Plan. 
The consequences of a proposed production plan can he 
determined before finalizing and implementing it. 

Edit Plan can suggest the optimal production plan based 
on various factors, such as lead time, yield, work-in-pro- 
cess, inventory, and demand. One or all factors can be 
varied to view how the changes will affect the production 
plan. This provides flexibility for adiusting to the rapid 
changes in the manufacturing environment. The planner 
can be assured that the production plan is the best plan 
possible under the current manufacturing conditions. 

Since the planner needs to access a large variety of data 
to create a reliable production plan. Edit Plan can access 
the information by three different windows (see Fig. 3 for 
one example). The windowing feature in Edit Plan is per- 
formed by using parent and child forms in VPLUS/3000. 
The result is a planning spreadsheet that can be manipu- 
lated by adjusting individual period values or by applying 
any of several precoded algorithms. 

Edit Plan has another special feature called Fill Column. 
The Fill Column function allows the planner to simulate 
or modify arrays of data easily and quickly. This feature, 
used throughout the system, gives the user functionality 
similar to that provided by 1-2-3 '" from Lotus T Fill Column 
can set a range of period values to a constant, or adjust 

l-2'3 and Lotus are US. trad-emarKs ol Lotus DevelCKpmenl Corp 



them by a constant or a percent increase or decrease. Within 
Fill Coiumn is a feature called ramping, defined as adding 
the quantity entered to the existing quantity and storing 
the result in the next period on the horizon. This algorithm 
continues until all the specified periods are filled. 

Since the Fill Column function Is used In multiple pro- 
grams, it was decided to include it as a Segmented Library 
procedure. This provides for easy maintenance and more 
quality in the PL-10 product. 

Explode and Roll Forward. PL-i o has scheduling functions 
known as the Explode and Roll Forward transactions. 
Explode is similar to standard !vIEP explosion (with some 
extras). Roll Forward is a bottom-up MRP implosion. 

The scheduUng function is a process of maintaining the 
production plan to satisfy the total demands. A finished 
goods item, also referred to as the end item, is demanded 
by customers. This end-item demand generates require- 
ments for intermediate parts. The intermediate parts gener- 
ate requirements for raw materials and so forth. Explode 
in PL-10 calculates the total of each component in the bill 
of material required to manufacture the planned quantities 
of end items. Based on this* it w\\\ then suggest what will 
be made by date and quantity for each part. These plans 
are based on the part information, planning bill structure 
information, demand already entered, current inventory, 
and work-in-process. 

Explode starts with the end item and works downward 
(see Fig. 4). A schedule based on top-down demand alone 
will not show when a schedule is impracticaJ because 
Explode does not know the lead-time requirements of com- 
ponent parts- For example, if a customer orders product A 
to be shipped tomorrow, but it takes seven days to produce 
component B of product A, the earliest Product A can be 
shipped is one week from today. Explode would suggest 
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Fig, 3. Edit Piaa screen dlsptBy. 
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the factory begin producing Product A today beeause it has 
ao way to adjust the parent's schedule for the component's 
lead time. 

This problem is solved by using Roll Forward, a bottom- 
up approach, often referred as implosion [see Fig. 4), This 
function in PL-IQ begins with the requirements (from 
Explode) for the lowest-level parts in the bill of material 
and calculates w^hen these parts should be produced and 
liow many. Once produced, they can be allocated to tlie 
next higher-level part to arrive at the parent part's dates 
and quantities. This continues until the dates and quan- 
tities are calculated for the end item. Roll Forward shows 
how feasible the schedule is /based on both work- in- pro cess 
and planned starts (building the part from scratch). 

Implosion logic quickly becomes unmanageable when 
many components are assembled into one parent, which 
is why standard MRP does not have this feature > Since 
semiconductor bills are short and simple, PL-IO handles 
Roll Forward for multiple components by having one part 
act as the driver. In the example shown in Fig. 4, only the 
die supply is rolled forward. Package requirements are cal- 
culated by Explode, but Roll Forward assumes that suffi- 
cient packages will always be available. 

On the technical side, both of these programs use external 
files that are loaded into memory at the beginning, tiien 
read from and written to throughout the program. For the 
Explode program, the files are requirement files. These files 
state the demanded quantity and date, There is one require- 
ment file for each level in the bill of material. The Roll 
Forward program reads the requirement files from Explode 
and generates supply files for the parent parts. If the planner 
is unsure of the results from either Explode or Roll Forward t 
these files can be used to analyze iht? production plan. 

By using Edit Plan, Explode, and Roll Forward, the plan- 
ner can make more intelligent decisions- Since the produc- 
tion plan is considered the company's game plan, it is very 
important for the plans to be realistic and reliable. 
Binning. A common process in the semiconductor industry 
is binning: a part generates multiple byproduct parts based 
on sorting or testing. This can create excess inventory. 

When Explode processes a part that bins into byproducts, 
the requirements are optimized by generating requirements 
that satisfy demand while niinim.izing the excess inventory. 



Demand : 



E)cplQde 



Part A (End Item) 



Part B (Untested) 



Parte 
(Package) 





Bin Requirement: 



Fig. 5. Btnning exampie. 

For example » component Part A bins into two parts, Part 
Al and Part A2, as shown in Fig. 5. If demand for Part Al 
is 30 and demand for Part A2 is 50, then how much of Part 
A should be produced? 

The first consideration is the expected bin-uul percen- 
tages for Part Al and PeuI A2. In this example, the bin 
percentages are 60% and 40% respectively. A traditional 
MRP .^vKtern, using these percentages, would start 50 units 
of Part A to build Part Al. plus 12n units of Part A to build 
Part A2, for a total of 175 units started. At bin-out time. 
I his would result in 105 units of Part Al and 70 units of 
Part A2, clearly a waste of materiah 

PL-10 optimizes the plan by considering all the by-prod- 
ucts of Part A together. In this example, 125 would be the 
minimum quantity of Part A to satisfy the demand. How- 
ever, this still results in excess inventory of 45 units for 
Part Al . True optimization occurs when the entire planning 
horizon is considered. The excess inventory of one period 
may be used to mset the demand in another period, thus 
minimizing the need to produce more Part As than are 
necessary. 

To illustrate this better, consider a planning horizon 
(Table 1) that is three periods long. The maximum require- 
ments come from Part A2 in periods 1 and 2 and Part Al 
in period 3. Notice the excess inventory is kept to a 
minimum and all demand is satisfied with this method. 

In this example, the 125 units planned for Part A in 
Period 1 satisfy the demand for both Part Al and A2. They 
also create enough excess inventory (45 units of Al) to 
satisfy demand for Al and A2 in Period 2 without addi- 
tional starts. In Period 3 the only demajid is for 15 units 
of Al not covered by inventory, so only 25 Part A units 
are started. 

AlJocation Rules. Allocation of supply is performed by 
Roll Forward in PL-10. Allocation is needed when several 
parent parts (different package configurations, for example) 
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Part Priority: 
Parent Parts: 



Compor>ent Part: 




Fig, 6. MocaiJon exBmpfe for equBi part priortty 

can be made from a single component, such as a die. ft 
differs from binnmg in tiiat the planner most decide how 
to allocate the available dice. Roll Forward suggests a de- 
fault allocation using parameters set bj'^ the planner. The 
transaction will not allocate more than the amount re- 
quested for any part. Any excess inventory will remain as 
the part's inventory. 

In the bill of material, many parent items can be struc- 
tured to a single component. Likewise, a single parent item 
can be obtained from several sources of supply [compo- 
nents]. The planner can set parameters in PL-10 to allocate 
these supplies effectively. 

Each part contains a field called Priority. This signifies 
that the supply should be allocated first to the highest 
priority to meet all its demand, tf priorities are the same, 
then the supply is allocated based on demand. If there is 
insufficient demand, the ratio of each part's demand to the 
total demand will be calculated and the supply allocated 
by that fraction. An example will illustrate this better. Fig. 
6 and Table 11 show the results when the part priorities are 
the same. 

Consider the same example, but with different prionties 
where Part PI has a priority of 5 and Part P2 has a priority 
of 7, The results are given in Table III. Notice that Part P2's 
demand is satisfied before allocating to Part PI , 

The allocation shows if the production plan generated 
by the explosion process is indeed workable. In the exam- 
ple above, the plan is considered impractical because of 
insufficient supply. 

Resource and Capacity Planning. Semiconductor facilities 
are equipment and capital-intensive. Equipment is sophis- 
ticated and expensive f and capacity utilization is a very 
important factor in increasing productivity and decreasing 
costs and long cycle times. Equipment underutilization is 
no better than equipment overutilization. 

A major feature of PL-10 is a vehicle to report utilization 
(over and/or under) of resources predicted by the produc- 
tion plan. Rough -estimate resource utilization reports show 
the planner any periods where there are potential capacity 
bottlenecks or excess idle time. With this information the 
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planner can adjust the schedule hy pulling up or pushing 
out production, or by reallocating resources. 

Resources in PL- 10 can he defined for any critical Item 
at a facility, such as overall process capacity, machtne ca- 
pacity, or labor. Resources can be tied to a shop calendar 
depicting the days the resource will or will not he available. 

Resources have a certain amount of capacity and down- 
time, which are not usually evenly distributed across the 
planning horizon. To accommodate this situation, the user 
can adjust ali plaiming parameters of a resource by time 
period. 

The next step for the planner is to specify the production 
parts that wnll use each resource, PL-10 lets the planner 
map the following parameters to the part-resource pair: 

1. Resource requirement for one unit of the part, 

2. Resource lead time to define the number of working days 
before the part's completion date when the resource is re- 
quired. 

3> Resource yielding factor (%) to compensate for aotici- 
pated yield loss between the number of units scheduled 
and the number that will use the resource. 

A part ill a semiconductor device fabrication process can 
return several times to the same equipment or process step, 
such as the photomasking step for a wafer. To accommodate 
this situation, PL-10 can assign a part to the same resource 
for several steps in the manufacturing process, 

PL-10 extracts production plan data and calculates the 
required resource use given the factors listed above. A sum- 
mary report for a resource is given in Fig. 7. 
Memory-Resident Shop Calendars. PL-10 makes intensive 
use of date calculation.s. Because the system schedules 
manufacturing areas having different work schedules, PL- 
lO's date calculations must take into consideration multi- 
ple shop calendar parameters. Produclioo Starts, Outs, and 
Supply are all associated with either a start date or a due 
date. All dates are represented in year-mo nth -day format, 

Date calculations must cover the complete planning hori- 
zon (up to 26 months), and must take into account the 
different calendars (up to 20) I hat can be defined by the 
user, the workday and holiday configuration for each indi- 
vidual calendar, and the lead times and lead time adjusts 
of the various planning parts and their associated part struc- 
tures- Again, all dates are represented in year-month-day 
format. 

The problem posed to the PL-10 team was how to access 
this massive calendar quickly and still keep batch run times 
to a minimum. PL-lO's predecessor, designed to schedule 
only a single work area, stored the calendar m a flat file 
and read it into memory. The representation of the file was 
in year-mo nth 'day format where each digit was represented 
by 4 bits- Thus each calendar day was represented by 24 
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bits or 3 b>1:es. In this configuration only workdays were 
kept in the file. If a calendar year had 260 workdays, and 
the planning horizon spanned two years, then 1560 hytes 
(260X2x3) were needed to hold the table. If the nser were 
able to define 20 different shop floor calendarSt then a total 
of 31^200 bytes would have been needed to hold aU I he 
calendars in memory. 

In building the current version of PL-10^ the memory 
storage requirements for 20 different calendars using the 
old scheme would have been impractical. Another ap- 
proach was taken to represent the calendars and still keep 
them resident in memory. F*or each different shop floor 
calendar, a HolidayA/Vorkday mapping is kept for each 
calendar day in the planning horizon. Hence, two tables 
are needed, one for each calendar day in the planning hori- 
zon, and one for the Holiday/Workday indicator for the 
various shop floor calendars. A calendar day is represented 



by 16 bits instead of 24 bits. The new year-month -day for- 
mat representation is: year — 7 bits, month — 4 bits, and 
day — & bits. 

With this new^ fonnat, the memory requirement for 20 
different shop floor calendars, each spanning 26 months, 
is (considering that a planning month in PL-10 can have 
up to six weeks or 42 days]: 

Calendar Table: 

(26 months) X (42 days/month) X [2 bytes) ^ 2184 bytes. 



Work Day Table: 

(20 calendars) x (26 months] x (42 days)/(8 bits) = 2730 bytes. 
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Fig. 8, Organization af memory- 
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Three other tables of smaller sizes are kept in memory 

to provide quick date calcuiations for month or week plan- 
ning* The month and week tables have pointers into the 
day table to locate the starting date of each calendar month 
and week. The period table summarizes the workday 
tabie — It shows the total days and work days in each plan- 
ning period. AJJ five tables and their relationships are rep- 
resented in Fig. 8. 
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A Study of Panel Deflection of Partially 
Routed Printed Circuit Boards 

Finite element analysis was used to show that the stress 
and deflection of partially routed boards during handling 
will be within allowable limits. 

by George E. Barrett and John H, Lau 



TO REDUCE MACHINE SETUP TIME during the man- 
ufacture and assembly of printed circuit boards, 
small circuit boards are processed in subpajiel form. 
A subpanel consists of one or more finished boards still 
attached to a supportive frame. To facilitate separation of 
the boards after assembly, a partial router path is cut around 
the perimeter of each board, so that the boards are held in 
place by connecting tabs. 

While partial routing simplifies depanelization {the sep- 
aration of boards in a subpanel) » it also reduces panel rigid- 
ity, so that a panel supported on the sides, such as during 
board transport between processes, will bow more than an 
unrouted panel. When assembling surface mount boardSt 
board deflection must not exceed 0.7% of the board length, 
since deflections greater than this will affect component 
planaiity and the quality of solder joints [see Fig. 1). 

Since the elimination of partial routing w^ould require 
the development of a more sophisticated and costly de- 
panelizatlon process, a finite element analysis was used to 
determine the impact of routing paths on panel rigidity. 



Printed 
Circutt 



Surface Mount Component 




Panel dafleciion does not affect 
component planarfty 




Too much panel deflection 



Fig. 1 . Panef deflection snd component planarity. 
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The primary objective of tliis analysis was to character! sse 
the deflection af a printed circuit board that had been par- 
tially routed (Fig. 2), and to compare panel deflection with 
the specification for panel flatness. Induced stresses were 
also characterized, to verify that material failure did not 
occur. 

Why Use Finite Element Analysis? 

The finite element method iva!> selected as a tool for this 
study because no closed-form solution for the partially 
routed panel was available, hi addition, available software 
allowed flexibility in modeling and provided high-resolu- 
tion output both graphically and in tabular form. To verify 
the accuracy of the finite element method, a finite element 
analysis was used to solve for the deflection of an un routed 
paneh The results of this analysis were compared to the 
closed-form solution (see box, page 33), and the two were 
found to be in excellent agreement. 

Acceptance Criteria 

Noting the properties of the material to be used and in- 
dustry standards for tlie assembly of surface mount boards, 
the following acceptance criteria were established for the 
partially routed panel under study: 

■ Maximum allowable deflection of each board is less than 
0.7% of the length. 

■ Maximum strength intension equals 35 to 80 ksi (1 ksi = 
1000 psi),^ 

■ Maximum strength in compression equals 35 to 85 ksi.^ 

■ Maximum strength in shear equals 14 to 25 ksi.^ 

Application and Problem Definition 

The surface mount assembly line, being developed 
jointly by the Hewlett-Packard Personal Office Computer 
Division, Manufacturing Research Center, and Entry Sys- 
tems Operation, will incorporate stations for solder- paste 
application, component loading, solder reflow, wave sol- 
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Fig. 4. Fimte uisment model for rtte parUatly routed panel. 

Eisments A, B, and C refer to Figs. B and 9. 

der, board cleaning, inspection, and depanelization. Panels 
will be transferred from station to station by a board han- 
dling system. While boards are being assembled in each of 
the process steps they will be supported from the bottom 
so they will not deflect. However^ while boards are being 
transferred by the board handling system they Eire sup- 
ported only along two opposite edges. As a result, boards 
will bow and components may dislodge or skew in the 
uniiardened solder paste. 

Since board deflection will only occur during board 
transport, the displacement boundary conditions are set to 
simulate tliis process. As can be seen in Fig. 3, displacement 
boundary conditions are set along the leading edge [stress- 
free boundary), the axis of symmetry in the X direction, 
the axis of symmetry in the Y direction, and one of the 
supported edges. The displacement boundary conditions 
for each edge are as shown in Fig. 3. 



X = Free to Move 
Y = No Displacement 
Z = Free to Move 
R, ^ No Rotation 
Ry = Free to Rotate 
R^ = No Rotation 



Simply Supported 



Stress Free Boundary 




X = No DispLacement 
Y = Free to Move 
Z = No Displacement 
R^ - Free to Rotate 
B^ = No Rotation 
R™ ^ No Rotation 



X = No Ois placement 
Y = Free to Move 
Z = Free to Move 
R, = Free to Rotate 
Ry = No Rotation 
Rj = No Rotation 



Fig. 3, Dispiacement boundary 
conditions. 
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The boundary value problem is further defined by noting 
the load density (w — 0.013 psi) and material properties 
(Young's modulus ^ 1, 600,000 psi. Poisson's ratio = 0.028). 
The load density was established by measuring tlie load 
density of an assembled board currently being manufac- 
tured, and applying the same Load density to the model. 
Material properties were taken from reference 2. 

Structure Description 

A partially routed panel was created for this study, and 
four different connecting tab dimensions were considered. 
These dimensions were set to present a worst-case scenario, 
while still adhering to current manufacturing practices and 
projected product design. Fig, 2 gives the dimensions of 
the design. It can be noted that this design has one tab 
conjiecting adjoining boards and the cross-sectional area 
connecting adjoining boards is identical. Since the struc- 
ture is symmetric about the X and Y axes, a finite element 
model was created for only one quarter of the panel (shaded 
area in Fig. 3), Fig. 4 shows the model. When creating the 
finite element model a thick shell element was used. The 
shell element was used because a thick plate element was 
not avaijable on the software used, and because a shell will 
assume the form of a flat plate as the radii go to infinity. 
A thick element was used instead of a thin one to capture 
the effects of transverse shear through the thickness. 

The thick shell element is shown in Fig, 5* Fig, 5a shows 
the incremental cross-sectional area and the radii of curva- 
ture in the X and Y planes. Fig. 5b shows the tensile for 
compressive) stresses as well as the in-plane and transverse 
shear. Fig, 5c gives the bending and twisting moments in 
each plane. 

Results 

The analysis showed that the maximum deflection for 
the entire subpanel was between 0.61 inch and 0.42 inch 
depending on the tab width used. While these values ex- 
ceeded the allowable limit, individual deflection profiles 



Rg, 5. Forces and moments act- 
ing on a thick'Shafl element. 

for the boards in the subpanel were significantly less and 
within the allowed limits (as measured across each board 
separately). This is seen in the deflection plot shown in 
Fig, 6. In Fig. 6. the undefomied mesh is showm in the 
background and the deformed mesh in the foreground. 
While the deformed mesh shows significant subpanel dis- 
placement* it also shows a discontinuity in the slope of 
the subpanel. This discontinuity occurs where the connect- 
ing tabs hold the boards together. The curvature of the 
boards on either side of the connecting tabs appears to be 
insignificant. Noting that the acceptance criteria are for 
board deflection rattier than subpanel deflection, this de- 
sign meets the criteria for deflection. 

The stress contours are shown in Figs- 7 and 8. These 
are ihe distribution of the Von Mises stresses in the panel. 
(The Von Mises stresses are used because they take into 
consideration all the stresses.) The contours show that 




Fig. 0, Deflection of the panel. 
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Fig. 7. Von Mises stress distnbu- 
Hon tn the panel. 



stresses reach a maximum at the connecting tabs. This is 
reasonable since the connecting tabs must support the same 
load as portions of the board having a larger cross-sectional 
area. 

The stresses for the tabs are given in Fig, 9. In this table, 
A represents the tab w^idth for that iteration of the analysis, 
(T^ and cr^. are the tensile/compressive stresses, and r repre- 
sents the in-plane shear. Elements are listed to correspond 
with the respective element plots^ Fig, 4. A review of Fig. 
9 shows that as the tab width is increased the induced 
stresses are reduced. It can also be seen that the induced 
stresses are less than the maximum allowable. 

Conclusions and Summary 

The results of the finite element analysis indicated that 
subpanels with the prescribed dimensions could be par- 
tially routed without causing mechanical failure or com- 
promising solder joint qualit\^ It also showed that while 
partial routing will increase overall panel deflection, 
boards within the subpanel will not be deformed beyond 
the allov\rable limit. 

Since the designs used in this study represented a worst- 
case scenario, partial routing of surface mount boards was 
declared a safe practice. As a result, the need to develop 
a sophisticated depanelization w*orkcell was eliminated. 
Benefits included savings of one hundred fifty thousand 
to two hundred fifty thousand U.S, dollars for capital equip- 
mentt and reduced process development time by approxi- 
mately six engineer m.onths. 
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Deflections, Forces, and Moments 
of a Printed Circuit Board 



Ctosed^Form Solutions 

Fig la shows an 18 >^ 12x0.062Hn printed circuit panel with 
a Young's modulus (E) equal to 1 ,600^000 psi and a Porsson's 
ratio (v) equai to 0.28 This panei is subjected to a uniform ioad. 
w - 013 psi. and is simpiy supported along x = o and x = 
a and is free to move along y = ±b/2. it can be shown that the 
ciosed form solutions for the deflections (d), the bending mo- 
ments (Mj(, M^). the twtstang momem (M^J. and the transverse 
shears (Qh, Qy) are given as toliows. 
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Fig . 1 (a} Printed circuit panel, (b) Sttaded area shcms portior: 
subjected to finite element snafysis. 
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fig. 2. Finite element model for a quarter of ihe pnnled circuit 
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Fig. 3. Deflections 0/ the panel at various locations fsee Fig. 
2). 
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The numerical results of the deflections at locations 1 through 
6 of the panel (Fig, 2) are shown in Fig 3. Tlie bending and 
twfsling moments and transverse shear forces at location 1 are 
given in Fig 4. These results were obtained by summing the 
above series up to m - 1 5. 

Finite Element Solutions 

Because of doubte symmetries (see Fig. 1b), only a quarter 
of the panel (shaded area in Fig. lb) is modeled, as shown in 
Fig. 2 It consists of 54 doubly curved shell elements. Each ele- 
ment has a nodal points. Each ncdaf point has six degrees of 
freedom. The displacenneni boundary conditions are exactly the 
same as Ihose shown in Fig. 3 on page 30. Finite element results 
for the deflections, bending and twisting moments, and trans- 
verse shear forces are summarized in Figs 3 and 4. Ii can be 
seen that they are in excellent agreement with the closed-form 
solutions. 
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Fig, 4. Bending moments, twisting moment, and sheaf forces at iocation 1 , 
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Reliability Theory Applied to Software 
Testing 

The execution-time theory of software reliability is extended 
to the software testing process by introduction of an 
accelerating factor. It is shown that the accelerating factor 
can be determined from repair data and used to make 
prerelease estimates of software reliability for similar 
products. 

by H. Dean Drake and Duane E. Wolting 



THE APPUCATION OF RELIABIUTY theory to soft- 
ware is in its early stages. The marketplace, however^ 
demands that the reliability of software in new prod- 
ucts be improved and that this key quality attribute some- 
how be quantified. An observation by three British mathe- 
maticians in 1952 underscores early recognition of the 
problem, but provides little insight as to its definition or 
how to measure software reliability: 

Those lA^ho regularly code for fast electronic computers 
wiU have learned from bitter experience thai a large frac- 
tion of the time spent in preparing calcuJatfons for the 
machine is token up in removing th& biunders that have 
been made in drawing up the programme.^ 

Today's reliabiiity engineer certainly has better methods 
and models to help understajid software reliability than in 
1952, yet a practical way to conceive of software reliabiJity 
still eludes the industry. Even simple discussion of soft- 
ware reliability gives rise to terms such as "'system crash" 
and "bug" that are foreign-sounding to those who routinely 
apply reliability theory to hardware. 

While software reliability does differ from hardware in 
some aspects, it can be conceived of and applied using a 
model based on conventional reliability theory. Measure- 
ment of software reliability in terms of failure rate {span- 
ning both prerelease and postrelease periodsh treatment of 
software testing as a form of accelerated life cycle testinj^, 
and use of a contemporary reliability model for software 
all form a basis for reliabiiity analysis of software. 

Theoretical Model 

Conventional reliability theory' often describes hard- 
ware reliability in terms of an instantaneous failure rate 
such as shown in Hg, 1. Based on this model, reliability 
analysis proceeds by assuming a distributional form for 
the time to failure, obtaining observations on this random 
variable H and then using the data to arrive at a statistical 
estimate of the failure ratCn 

The software characteristic, also shown in Fig. 1 , is de- 
rived from a theoretical model proposed by Musa,^ "* which 
can be classed as a reliability growth model. The model 
reflects a basic intuitive supposition: software generally 
irnproves with age. As a program matures^ defects are dis^ 



covered, the number of potential failures is reduced when 
the defects are fixed, and the rate at w^hich new failures 
occur is also reduced. 

Musa calls his model the execution*time theory of soft- 
ware reliability because the failure rate curve shown for 
softw^are in Fig. 1 is actually a function of execution time 
instead of calendar time. Execution time is the time spent 
executing the program being analyzed. It excludes idle 
time, which a model using calendar time would include. 
For hardware, it is self-evident not !o count the time the 
unit is not operational when taking data. The actual time 
a program spends executing, on the other hand, is often 
obscured by various factors such as time allocated to an 
application in a multitasking system environment. 

The execution-time model predicts that the instantaneous 
failure rate for software can be described by (see Appendix): 



h(x) = h^^e""^^^'^-^^ 



(1) 



where h^ and N^ are fixed parameters that are chajacteristic 
of a given program and x is execution time. 

If the assumptions are made that time spent explicitiy 
testing a software product is synonymfjus with execution 
time and the testing environment is more stressful than 
the normal user environment, then the model can be ex- 
tended to the software testing process. Consideration of 
test time and execution time as being equivalent is straighl- 




Time 

Fig, 1 . CharBcierfstfc fmiure rats curves. 
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forward. Time spent testing an interactive application or 
compiling test modules for b new language is obviously 
time spent executing Ihe software. Software doesn't wear 
out as hardware systems characteristicajly do; however, it 
does have an aging mechanism. As a given software product 
is exercised through use. more and more ujitried^ discrete 
input cases are executed from the total possible input space 
of the product and previously undiscovered defects are 
found when particular cases result in failures, Since soft- 
ware testers are trying to cause failures, they create an 
environment for the software in which input cases occur 
with greater frequency than they would with normal use 
and therefore failures occur at a higher rate. 

This higher failure rate in testing is accounted for by 
modifying Musa's basic model to include an accelerating 
factor C such that the failure rate in testing is: 



hjx) = Ch(x) = Ch,,e-f^-'^^^'^ 



(2] 



where h^(x) is the softw^are failure rate in testing with re- 
spect to test time (or execution time), and C is a constant 
greater than or equal to one. Introduction of the constant 
C implies that the ratio of the failure rate h(x) to the accel- 
erated failure rate in testing h^Cx] is constant for all values 
of X. 

Application of the Software Reliabitity Model 

The process used to test terminal firmware at the HP 
Roseville Terminals fJivision has been designed with the 
software reliability model in mind. Testing is performed 
by teams of engineers responsible for various features of 
the firmware. They test on a part-time basis (as opposed 
to one or two engineers testing features sequentially on a 
full-time basis). This ensures that test cases are applied 
concurrently across all of the firmware's functional areas 
and helps to keep the occurrence of a failure independent 
from other failures and test coverage congruent with use 
coverage (see assumption 3 in Appendix). Time spent test- 
ing is logged to provide failure data as a function of test 
time (execution time) instead of calendar time. 

Test data is then compiled in the context of the software 
reliability model. When defects are found, a report is gen- 
erated by the testing engineer. These reports are counted 
each test day and divided by the day's test hours to deter- 
mine a test day failure rate. A failure rate graph is then 
constructed by plotting successive average failure rates 
against cumulative test time. 

Such a plot for the HP 2 3 93 A and HP 2397 A Terminals 
is show^n in Fig. 2 [both terminals contain the same 
firmware). Also shown is a curve that is a fitted regression 
model of the form Ae^**. By fitting the exponential curve 
to the data^ it is assumed that the underlying trend is the 
general form of the decaying exponential predicted by the 
software reliability model in equation 2 without actually 
knowing the parameters C, h^, or N^. 

Although the model shows failure rate as a continuous 
function in Fig. 1, it predicts actual rates to be constant 
between revisions (see Appendix). Given this attribute, the 
ending failure rate of the terminaFs firmware at release is 
the value of the regression function at the end of testing, 
labeled x^i^ase ^^ F^S- 2- This is determined by evaiuating 



the regression function at the final test time value of B47 
test hours. This terminal's initial reliability is therefore a 
regression function of the form Ae^**, where the parameter 
estimates from the test data and regression analysis^ are A 
= 83.9 and B = -0.00162. Thus h,{x) = 83ie '*""i^^^ 
and the accelerated failure rate at X|^,,j^,,3,,, is hjjf647) = 29.4% 
failures/test hour, tliat Is, Z9.4% of the terminals wnuJd be 
expected to fail per test hour if the test were continued. 

This is the expected failure rate for the firmware's initial 
release » and until the firmware is revised » it should remain 
constant. 7'his failure rate must, however, be converted to 
an equivalent rate in a user environment. It must also be 
expressed as a function of calendar time to reflect the cus- 
tomer's perspective. For terminals, the relationship be- 
tween execution time and calendar time is assumed to be 
linear because their firmware is exercised whenever cus- 
tomers use their terminals. Experience has shown that cus- 
tomers operate HP terminals an average of 2000 hours out 
of B760 pt^r year, so the calendar- time equivalent failure 
rate becomes: 



h(t) - [l/4.38)h(xj 



(3) 



where t is calendar time- From equations 1, 2, and 3, the 
calendar-time failure rate in terms of accelerated execution- 
time failure rate is 

h(t} - [1/4.38)[1/C}hjx) 

or on an annual basis, 

h[t) - [1/4,38)(1/C)(8760)hjx) = 2000(1/C)hjx) (4) 

Using the released failure rate for this terminal, the calen- 
dar-time failure rate for that version of the firmware then 
l)ec:omes: 

h(ti = 2000fl/C)hJ647) = ( 1/C)5 8800 % failures/year {5) 

Computing Accelerating Factor 

At this point a prerelease estimate of the reliability of 
this firmware could be made if the accelerating factor C 
were known. Since h(t) is expected to be constant for the 
duration of the initial revision, a measured failure rate for 
that period of time can be equated to equation 5 to solve 
for the accelerating factor. 




EOO Xf, 



Cum Illative Test Time (Hours) 
(Equivalent lo Execution Time x) 



Fig. 2, HP 2d^3A and HP 2397 A prerelease failure rate. 
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But how can such a failure rate be determined for 

firmware? There is no warrmntir^ to cause failure data to be 
gathered, nor is the industr\^ in the habit of taking data of 
this nature. An answer lies in the fact that firmware (or 
software] can only be repaired by revising the customer's 
product. Those repairs can be tabulated in much the same 
fashion as hardware failure rate data is tabulated from war- 
ranty repair data. By assuming that a unit's firmware is 
repaired when its firmware is revised, and further, that a 
failure occurs on the same date as the repair, a failure rate 
can be computed based on unit revisions. 

The initiaJ revision of the HP 2393A/7A firmware was 
produced in all units from September 1985 to )une 1986. 
If the sum of the individual unit revisions is divided by 
the sum of the monthly shipments over that period and 
multiplied times 100» the half-year average failure rate is 
found to be 0.615%, It is the half-year rate because only 
repairs to a unit that occur in the first six months from its 
date of shipment are reported and can be tabulated. If this 
rate of failure for a six-month window from shipment date 
is assumed to be constant, then the annualized failure rate 
is twice the six-month rate. Therefore, the overall average 
annualized failure rate for the version of this firmware that 
resulted from the testing process for the HP 2393A/7A is 
1.23% failures/year. 

Rearranging equation 5, substituting the average an- 
nualij^ed failure rale, and solving for C yields; 



C, = 58800/h(t] = 58800/1.23 = 47805. 



(6) 



C| is the accelerating factor for the HP 2 393 A/7 A testing 
process. 

A second termioal, the HP 2394 A. was subsequently 
developed and its firmware tested similarly to the HP 
2393 A/7 A*s. The test-time failure rate data for this terminal 
is shown in Fig. 3. Following the same steps as above, its 
final failure rate from testing is determined by evaluating 
an exponential function fitted to the data at the final 
cumulative test time. The calendar-time equivalent failure 
rate from equations 4 and 5 Is: 

h(t) = 2000(l/C2)hJ384] = 67200/0^ % failures/year f7) 

As before, this is the failure rate for this terminal *s initial 
firmware release given some accelerating factor resulting 
from the testing process. 
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Since this lermina] has a predecessor for which an esti- 
mate of the accelerating effect of the testing process is avail- 
able, a prerelease reliability estimate can be made. Substitu- 
tion of C^ for C;. in equation 7 gives a prerelease estimate 
of the HP 2394 A's reliabtJity to be 1.41% failures per year. 
once released and in use by customers. Of course* this 
assumes that the accelerating effect of the second testing 
process ts the same as that of the first, but it does provide 
an estimate of the reliability of the firmware before release 
and a potential measure to help decide when software or 
firmware is ready to release. As other projects are measured 
in this fashion, a history of computed accelerating factors 
will be built up, and a statisticallymore precise accelerating 
factor can be derived to estimate prerelease reliability. 

The HP 2394A's initial revision of firmware was pro- 
duced in all units from June 1985 to January 1986. Using 
the same technique as above for determination of a post- 
release failure rate based on number of firmware revisions, 
this terminal's overall average failure rale was 1.58% for 
the first revision of the firmware. Rearranging equation 7 
and solving for the accelerating factor gives Cj - 45532. 
The failure rate after release compares favorably with that 
predicted before release, and the closeness of the accelerat- 
ing factors {47805 to 45532) indicates tliat the testing pro- 
cess was fairly consistent in both cases. 



Implications for the Testing Process 

Several issues have arisen out of the application of the 
execution-time model to software. Use of an accelerating 
factor to describe the effect the testing process has on soft- 
T.vare reliability also raises questions about the variability 
of the testing process and the reliability improvement that 
results from it. Test coverage in the testing process is a 
critical aspect. How good a fit is required to conclude the 
moders applicability and what to do if the data from testing 
doesn't fit the model are other issues that merit discussion. 

Examination of the testing process reveals a system that 
does more I ban verify reliable operation of the software, 
[n a broader context, the failure data can be thought of as 
a measure of the performance of the reliability improve- 
ment process. Using principles of statistical process con- 
trol, this data provides insight into ways to improve the 
process. A control chart facilitates the interpretation of 
such data. It also provides statistical evidence of improve- 
ment when reliability growth occurs. Fig. 4 is an example 
of a **u" control chart constructed from data for the HP 
2394A. The chart is based on the Poisson probability dis- 
tribution,^ It is constructed from n successive paired obser- 
vations on the number of failures detected and the corre- 
sponding number of test hours required. For each of the 
paired observations, the sample failure rate* u(i), is com* 
puted; 



u{i) = w{i)/t{i) 



[B) 



Fig, 3. HP 2394 A prereleasB failure rate. 



where w(ii = number of errors detected or failures (detec- 
tion of an error for software also causes a failure} in the 
ith sample and t(i) = number of test hours required to 
detect the w(i) errors. The central Hue for the chart, u, is 
simply the weighted average sample failure rate: 
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y = 



1 w{i) 



m 



The control limits depend on the number of test hours 
recorded for each observation. The upper control limit, 
UCL(i), for the ith observation is: 



UCLCi) - li + aVu/tfi) 



(10 J 



The chart is constructed by plotting u(ih Q, and UCL(i) 
versus cumulative tesi time. For practical purposes in this 
instance, the lower control limit is zero. 

In this example, the process is "out of control" at x = 
53 and at x = 124 hours. Logbook entries indicate that 
these times correspond to the addition of new features to 
the base software. This was confirmed as the assignable 
cause of the variations leading to the failure rale spikes. 
Tills observation highlighted segments of code that were 
unusually prone to error and suggested where engineering 
effort should be focused. The process also show^s signs of 
stalisticaliy significant change after 272 hours. Beyond this 
point. 9 of i:3 consecutive paints lie below the centerline, 
a signal that the underlying failure rate has decreased. This 
provides additional statistical evidence that the reliabilily 
of the softw^are has growm or been improved as a result of 
the testing process. 

Coverage in testing must meet a basic assumption of the 
model (see assumption 3 in Appendix] to produce unbiased 
failure rale e.sti mates. If coverage is no! representative of 
the use space of customers, failure rates from testing will 
not correlate with actual use of a product. To ensure that 
estimates of the failure rate are unbiased, it is neces.sary to 
cover all of the features in the testing process. It is especially 



important that no untested features are released to produc- 
tion. This minimises the risk of significantly overestimat- 
ing the reliability perceived by the customer. 

The fitted curves shown in Figs. 2 and 3 were obtained 
using the method of least-squares applied to log- trans- 
formed failure rate data. Statistical tests indicated that the 
respective models are reasonably good fits to the observed 
trends. In both cases the strength of the exponential trend 
was significant compared with the residual variation or 
''noise." Further, the fitted curves accounted for most of 
the observed variability in failure rate. Other sources of 
systematic variabifity were not apparent. 

What if the failure rate data doesn't fit the decaying ex- 
ponential form vary well? If the data is not described by 
some form of monotonically decreasing function, it may 
signal the presence of a reliability problem. With hardware, 
early wearout mechanisms detected in life testing are likely 
to cause the product to be sent back for major redesign. 
The same applies to the development of software. If the 
reliability is not growing (ce.* the failure rate is increasing), 
the design may have a fundamental problem that w^ill re- 
quire redesign. If, on the other hand, the failure rate is 
decreasing but not exponentially, a reliability growth 
model that incorporates another functional form can be 
used. 

Conclusion 

Software reliability can be quantified through the appli- 
cation of a reliability growth model to test data. Simple 
structuring of the testing process provides the data neces- 
sary and the use of an empirically derived accelerating 
factor offers a way to make prerelease estimates of a soft- 
w^are product's reliability. Combined with correlation of 
postrelease failure data over a history of products, these 
estimates can be made wnth increasing statistical precision. 
These techniques can be implemented easily without major 
modification of existing processes and can be of immediate 
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use to help understand and improve this important quality 
attribute. 
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Appendix 

Derivation of the Software Reliability Model 



The Sippnoacli Xaken t^ this papsf uses a stalistical mode^ to charaetenze the reliatHlrty 
.■di software. The model rs founded tn Itieciry th^i is rauiinet^ applied to diverse prDbFems 
Jn ttiBi life sciflfices^ econcHTucs. arvd hardware eirgineeriDg AHhm>gf\ ihls theory tias 
been used exlensiveiy in Itie past tis appticatKjn to sottware testing is a comparatjvely 
raceni d'&vs-lcipmenl 

Derivation ol ihe model begina with a proba^lLsiic d^irtition of r^liabinty/ Here, T is 
a continuous landam variahFe thai denD!o$. the elapsed time (or mow generally the 
strati to taliure for b. system ur>der considefation Lei {[t^ be Itie prcjbability density of 
T and let F(l) denote Ihe associated cumylalive distribution funclion The reliabifity of 
the system at lime T ^ 1 is simply the probability that the elap^ssd time lo failure SKOeeds 
I. Thes vanalnon ol thFS p-robabiNty with time is described by Ihe reNebilily function. R(l), 
vfhidh <s the comptement of the cumulative djeuibution function' 



R[tJ 



HI) 



(J) 



The reNabilily function defines the ur>conditional probability that Ihe limci to failure 
eKCeBds t Often, however, il is necessaiy to know (he ptobabilily that iho system will 
fall at any particolaf moment gtven that it Has not railed up to Ihat lime, Ihe condittortal 
probabtlity of failure In a finite interva! (t, I * At] given that faJIkjm ha^ not c^scurnod up 
to time t< 4SL 



P^l':T<(t + At)|T>(l = [Ftt^itJ ' F(l)yR(r) 



m 



The instantaneous failure rate at time t, h(t), is obflained by hrst dividing this conditional 
probat>illty by i^t. then laktng Ihe limit as iM appn>e.ches icefo. This reduces to: 



h(t) -- f(tKR{t) 



010 



The lunotioh hit) i& also Kndwn as the hazard mte. It can be shown that Uie re^ia^lity 
function of the system can be otrtain^rf dJre<?ily from the hazard rate alone. In gener aJ : 



R(t) = eiitp[ 



r 



h(u)du| 



where u is a variable ol integratic^ 

The hazard rale is a particularly useful concept lor two reasons: 1) II is a readily 
imerprelable quanhly that descrttms the tendency to rail as a luncticn of etapsed {failure- 
ffse) lime, and 2^ all saNenI functions of T can be derived from it, including the pfobabiNty 
density and retiability tunclions In this conleKt, knowledge of the hazard fate is suflicient 
ID descnbe comptetely the reitability of tbe system under considefalion It also plays a 
central ri>La in the development ot the software reliability model 



Development of t 

Musa^ * showed thatthesedono^rts can be used to descnbe it^e reliability ol spftwam. 
In hts approach, the stress variable is Ihe actual CPU time use^ in execution, The 
model is thefefore known as the execulion-lime model, of whsch Ihe present model Is 
a modriied version The key asisumptKJins are 

1 . Failures oi Wie software system are caused by detects in the system Any such 
delects are independent of each other and are distributed at any time wtlh a constant 
avera^ occurrence rate (per rnstmction) throughout the code between failures Of 
repajrs. 

2. Types of instructions are wall-mixed. Execution lime between failures is large com^ 
pared to average esf ecu lion lime per mslfuction. 

3 Test cases are 3ppl>iod across tha t^reaJi^h of the produot^s leatures Teslirvg repre- 
sents Ihe environment in which the software will be used. 

4 The set of inputs tor each run of Itie software, whether dunng test or during cuginmier 
use. is selected landomJy 

&. All failures that occui are detected, 

f> The deled causing each tailuna ts removed wiliiout introducing n^w defects The 

defect ta removed before executfon resumes or rts rediscovery v$ not county. 

Under the assumptio*is, Itie mslantaneous failure rate is piecevflse conssaji-l, and la 
pKoportional to the residuai: number of errors in the system: 



h{x} = k{Na - n) 



I VI 



where N^ is Ihe numtsef of inherent errors in the program before testing begirt, n is 
Ihe numtier or errors coirected by fcumulaUve) exacutton limajc, and k is apropOrtiCHialFty 
constant. 

The instantaneous rate at which errors are bein^ removed js id^tiK^Hy equal to the 
Instantarteous leflure rate: 



cm/dK = h(!f) 



(VI) 



Equations V and VI. whan combined, lead Jo a drfterentjal equabon in n and x Its 

solution IS' 

n{x1 = N„[i - a *'] iVIl) 

Using equation V. the instantaneous railure rate as a function of lime becomes: 



h(j() = h«e ^ 



(Vtll) 



where h^ » kN^ is Ifie feilure raie at the onset ot testrrtg Equation VIII provides Ibe 
theoretical basis for fitting an exponential curve to the empinc&l failure rate diate and 
ts an example of a reitability growth model, Ihe decreasing latlure rate represenlmg 
"growth" ol the software's reliability. 
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Reader Forum 



The HP Jpufnal Hficourages It^chniqal cfiSicu&Si&n of the lOpics prgisented 

in fecent articJes and- will publish Genera eKpecled 

to be o1 Intsree!! to our readers 

Letters must be hn^f and are subject io sdltiDg. 

Letters shoutd be addressed to 

Ediior. Hewlett 'Packard vtoornaJ^ 3200 Hiitview Avenue, 
Palo Alto, CA 94304. U.S.A 



Editor: 

I was fascmate^d by the description of RP Precision Architec- 
ture in the August 1986 issue of the HP Journal ("Hewlett-Pack- 
ard Precision Architecture: The Processor/' p, 4J. While the 
architecture is interesting, there is no publicly availahle data 
thai proves that RISCs are economicatly beneficial, in the sense 
that they really reduce software costs in the design, coding and 
maintenance pha.se.^. I am researching this issue in a graduate 
course on software engineering economics. 

HP has a unique position as a leader of RISC technology, but 
at the same time needs to solve the problem of compatibility. 
I assume that HP has assessed this issue and has data to shed 
light on it. 1 would be very grateful if you could provide me 
viidth such data. 

While the purpose of this resyarch is purely academic, please 
be advised that most graduate students in this course, myself 
included, are also employed by engineering companies, 

Yoav Tafgam 
University of Texas at Austin 



You ask a question of great importance to aU users of com- 
puters: What impact does RlSC-sfyie processor architecture 
have upon the cost of software? 

Th e c h tj ra c i erl s i i c s of pro i:es so j a re h i i f>c:t u re t h ti t m os t affect 
software costs are those that are directly reflected to higher- 
level language programmers. For example, if a smaJi ndciress 
space "show^s through ' (he compilers to the users of a Janguage, 
requiring them to separate their code and data into unnoturaJ 



fragments, then there is cJeorJy an incrmmininl cost in design, 
coding, and muinfenonce o/such software. On the. other hand, 
if the compilers "masJc" such charoc ten's tics from program- 
mers, then no additionaJ software costs are incurred (though 
run -time performance may suffer f The HP Precision Architec- 
ture imposes /ewer addressing constrainis than most. Because 
at least 4fl-bil virfun/ addresses are supported, this is not a 
cause for worry. 

A simpler instruction set is not, in itself, a burden, because 
tha compilers end optimizer take core of the mapping from 
higher-level Jonguoges to the machine, if a progro mmer re- 
quests an integer division from Fortran, for example, the com- 
pilers arrange for the division to be done by the most expedi- 
tious means — with or without a DIVIDE instruclion. 

To /irst order, Precision Architecture machines ore neutral 
with respect to software costs. This is so becouse we success- 
fully achieved our ohjectiv^e of efficiently supporting all impor- 
tant languages and their data types. As a resuit, there is no 
increase in the complexify or volume of user software, and 
hence in user software costs. (You might wonder obout the 
cost of our rompiiers, becouse they ore more complex than 
nonoptimizing compilers, hut this is compensated by simpler 
hardware and the absence of microcode,} 

The second' order e//ects of reduced-compJexity machines 
arf^ positive ^ Imp roiling the cost/performonce of computer sys- 
tems permits a greater emphusis on software productivity, 
which is frequent iy compromised by the need to conserve pre- 
cious prov.fiasor vyvJ^^s. For ex(jmpJf:f, tbfr HP VHHH) Motlel 340 
Computer has on integrated symbolic debugging copabiiity /or 
C, Pascal, and Fortran 77. This represents o use of the greater 
addressability and speed o/ the muishlna to dellvfrir improved 
software productivity. The ALLBASE relotional/jtetwork data 
base system is another example of using additional raw power 
to provide greater application ease and flexibility. 

Any task inv^oiving the coordinated storage, retrieval, and 
management of in/ormotion con be improved by the appro- 
priate apphcation o/ computer power, and the production of 
reliable, e/fective software is no exception, Vcm shfjuid expect 
to see a new generation o/ computer-aided software engineering 
tools emerge, aided by the availahiiify of powerful low-eost 
progrtj m m i f ig w 1 1 rks to t io n s , The txiB t/per/onn a n ce a d v cm toge 
of HP Precision Architecture machines will play an important 
roJe in bringing about such integrated softwan^ deveJopment 
environments, 

MichaefJ. Mahon 

Manager 

Computer Language Laboratory 
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